Port 445 not visible in PBS (as virtual machine in PVE)

[corndelphinus]

I have a fresh installation of PVE, in which I have a PBS virtual machine (I don't have a second hardware for a separate server).
-> I need to connect a disk to the PBS via SMB, which uses port 445.
Proxmox Backup Server
When I use "nmap -p 445 <IP>":

• PORT STATE SERVICE​
• 445/tcp filtered microsoft-ds​

Proxmox Virtual Enviroment
However, when I do the same on the host PVE, everything works:

• PORT STATE SERVICE​
• 445/tcp open microsoft-ds​

I have the port enabled in iptables on the PVE:

• ACCEPT tcp -- anywhere <IP> tcp dpt:netbios-ssn​
• ACCEPT tcp -- anywhere <IP> tcp dpt:microsoft-ds​

Can someone please give me some advice on how to get SMB working in PBS?

 

[_gabriel]

is working without firewall enabled in the NIC of the VM ?

 

[corndelphinus]

is working without firewall enabled in the NIC of the VM ?

At PVE -> VM -> Firewall -> Options -> Firewall is "No"

I also tried turning firewall of whole PVE off.

 

[_gabriel]

so, firewall isn't the cause.
is firewall active on smb server ?

 

[corndelphinus]

so, firewall isn't the cause.
is firewall active on smb server ?

it is, but turning it off has no effect.

The problem is that port responds from PVE host, but not from the VM where the PBS is.

 

[_gabriel]

this is not a PVE fault, as, of course, it should works.
double check your config.
is VLAN involved ? is routed or NAT subnet involved ?

edit: is firewall enabled within PBS VM ?

 

[corndelphinus]

this is not a PVE fault, as, of course, it should works.
double check your config.
is VLAN involved ? is routed or NAT subnet involved ?

edit: is firewall enabled within PBS VM ?

Thank you for your reply!!

Host PVE:

iptables -L
ACCEPT tcp -- anywhere <PBS IP> tcp dpt:microsoft-ds

 

[_gabriel]

within PBS = on PBS :8007 interface itself.
VM on PVE is disabled so rules aren't applied.

 

[corndelphinus]

within PBS = on PBS :8007 interface itself.
VM on PVE is disabled so rules aren't applied.

Thanks again for your reply!

I was not able to find how to access PBS firewall via GUI or terminal. Even iptables command is "iptables: command not found"

At least here is PVE network settings

 

[_gabriel]

you have a NAT / masquerade for your vmbr2, so vmbr0 network can't access vmbr2 network. you need forwarding ports if you want access hosts on vmbr2 from vmbr0.
but vmbr2 can access vmbr0.

 

[corndelphinus]

you have a NAT / masquerade for your vmbr2, so vmbr0 network can't access vmbr2 network. you need forwarding ports if you want access hosts on vmbr2 from vmbr0.
but vmbr2 can access vmbr0.

Thank you for your reply! I have only 1 IP address, thats why PVE runs on vmbr0, and all VM´s runs on vmbr2.

 

[_gabriel]

your PBS ip is 192.168.201.1 while vmbr2 is 192.168.192.0 network.
please double check network before create topic.

 

[corndelphinus]

Again, thank you for your reply!

It is 192.168.192.0/18, which means Usable Host IP Range: 192.168.192.1 - 192.168.255.254 and thus my VM address 192.168.201.1 is fine

 

[_gabriel]

oups myself not experimented other than /24 networks.
post "interfaces" of PBS VM itself.
edit: you need to check the network : ping host>vm , vm>host , vm<->vm ...

 

[corndelphinus]

oups myself not experimented other than /24 networks.
post "interfaces" of PBS VM itself.
edit: you need to check the network : ping host>vm , vm>host , vm<->vm ...

Thank you for the reply!

Firewall or iptables is not included in the PBS.

I can ping:

• host>vm
• vm > host
• vm <> vm

• host > port 445
• vm > port 445

 

[_gabriel]

vm x port 445

what do you mean ?

 

[corndelphinus]

what do you mean ?

I am trying to connect to SMB in that VM (PBS), but:

VM (PBS)
nmap -p 445 <NAS IP>
PORT STATE SERVICE
445/tcp filtered microsoft-ds

Host (PVE)
nmap -p 445 <NAS IP>
PORT STATE SERVICE
445/tcp open microsoft-ds

 

[corndelphinus]

For the context - I am trying this: https://forum.proxmox.com/threads/pbs-mounting-windows-smb-share-as-datastore.113164/

And I am here:
"
Finally, mount your SMB share in PBS:
sudo mount -t cifs -o rw,vers=3.0,credentials=/etc/samba/.smbcreds //1.2.3.4/sharename /mnt/somefolder
"

and with this I get:

"
mount error: Server abruptly closed the connection.
This can happen if the server does not support the SMB version you are trying to use.
The default SMB version recently changed from SMB1 to SMB2.1 and above. Try mounting with vers=1.0.
mount error(112): Host is down
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) and kernel log messages (dmesg)
"
"
CIFS: VFS: cifs_mount failed w/return code = -112
"

That´s why I am testing that nmap port, which cannot be reached
NAS´s SMB supports version 2 and 3, tried it with the same result

 

[_gabriel]

your NAS block subnet outside its network ?
try disable its firewall.

 

[corndelphinus]

your NAS block subnet outside its network ?
try disable its firewall.

I am able to mount SMB with host (PVE) but not with VM (PBS)
Yup tried disabling NAS firewall